linux-kernel - [GIT PULL] Security subsystem fixes for v5.0-rc3

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [thread-next>] [day] [month] [year] [list]

Message-ID: <alpine.LRH.2.21.1901171437560.28339@namei.org>
Date:   Thu, 17 Jan 2019 14:40:22 +1100 (AEDT)
From:   James Morris <jmorris@...ei.org>
To:     Linus Torvalds <torvalds@...ux-foundation.org>
cc:     linux-kernel@...r.kernel.org, linux-security-module@...r.kernel.org
Subject: [GIT PULL] Security subsystem fixes for v5.0-rc3

Please pull these fixes for the security subsystem.

The first (by Casey actually) fixes a regression introduced with the LSM 
stacking changes.


The following changes since commit 7939f8beecf1cfb10d255be65bfbd3793fae82a1:

  Merge tag 'trace-v5.0-rc1' of git://git.kernel.org/pub/scm/linux/kernel/git/rostedt/linux-trace (2019-01-16 05:28:26 +1200)

are available in the Git repository at:

  git://git.kernel.org/pub/scm/linux/kernel/git/jmorris/linux-security.git fixes-v5.0-rc2

for you to fetch changes up to a5795fd38ee8194451ba3f281f075301a3696ce2:

  LSM: Check for NULL cred-security on free (2019-01-16 15:41:11 -0800)

----------------------------------------------------------------
James Morris (1):
      LSM: Check for NULL cred-security on free

Kees Cook (1):
      Yama: Check for pid death before checking ancestry

Tycho Andersen (1):
      seccomp: fix UAF in user-trap code

 kernel/seccomp.c         | 4 ++++
 security/security.c      | 7 +++++++
 security/yama/yama_lsm.c | 4 +++-
 3 files changed, 14 insertions(+), 1 deletion(-)